[HDFS-5716] Allow WebHDFS to use pluggable authentication filter

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.4.0
• Component/s: webhdfs
• Hadoop Flags: Reviewed
• Assignee: Haohui Mai
• Reporter: Haohui Mai
• Created: 04/Jan/14 00:23
• Updated: 09/Sep/14 18:03
• Resolved: 15/Feb/14 00:19

Description

Currently the WebHDFS server only uses SPNEGO filters for authentication purposes. The design serves the purpose well when SPNEGO is available, however, other services (e.g., the web UI) where SPNEGO might be unavailable can also use WebHDFS.

Note that the web UI and the WebHDFS are served by the same Jetty server on the same port. The Web UI can use customized authentication filters, it might make sense to allow WebHDFS to take customized authentication filters as well.

Issue Links

• relates to: HDFS-5796 The file system browser in the namenode UI requires SPNEGO.
• relates to: HDFS-7033 dfs.web.authentication.filter should be documented
• relates to: HADOOP-10307 Support multiple Authentication mechanisms for HTTP